Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6rsoGN1q1KQQ0W5_OaGgKjKiBRA.roa
File: 6rsoGN1q1KQQ0W5_OaGgKjKiBRA.roa (raw, json)
Hash identifier: S43Mr+GaUmZjEcgJmDlpYeQRSq1M5NLSyrp4Qvi2fY8=
Subject key identifier: EA:BB:28:18:DD:6A:D4:A4:10:D1:6E:7F:39:A1:A0:2A:32:A2:05:10
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21C8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6rsoGN1q1KQQ0W5_OaGgKjKiBRA.roa
Signing time: Fri 25 Nov 2022 04:40:24 +0000
ROA not before: Fri 25 Nov 2022 04:40:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.184.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8648 (0x21c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EABB2818DD6AD4A410D16E7F39A1A02A32A20510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:b7:cb:79:c6:c1:9c:78:19:a5:8d:ff:67:
49:85:7b:1c:51:a9:c6:be:f0:fd:7f:98:fe:d9:38:
c7:41:b2:e7:da:65:ff:4e:b7:f9:d4:27:2d:96:a1:
bf:33:b4:79:ad:63:a0:e9:ac:ee:23:23:63:fd:20:
e4:19:76:ce:4e:65:c9:49:43:d5:db:91:a4:8c:2d:
31:d9:4d:90:16:c3:22:18:c2:33:05:d3:6a:b6:8d:
bb:65:55:99:c1:bb:bc:e0:dc:68:ff:60:c5:d6:11:
4a:53:06:bb:86:01:81:d8:98:87:7a:b2:e6:ba:56:
94:d4:a9:e6:d1:0d:e2:4d:c3:18:3b:90:aa:8c:d1:
af:c5:f5:5b:58:05:64:ee:d0:27:46:61:54:09:a9:
f5:97:5b:d2:63:62:35:30:88:7e:6c:02:cb:5a:00:
4b:be:3d:e0:03:34:c0:22:7c:e4:1e:db:b7:4f:4c:
e9:cf:1d:ea:ea:c2:04:1b:d0:8b:0c:cc:75:b6:76:
b4:ea:ec:3d:84:6e:95:36:4a:9d:c7:88:c8:c0:95:
a9:07:e9:9e:31:2a:21:21:fa:fd:77:08:f7:53:31:
22:85:76:20:c1:b2:6c:3c:e3:d3:89:1c:a6:78:da:
ee:bc:fb:05:a2:9a:3d:d9:db:0d:63:1c:4f:d4:30:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:28:18:DD:6A:D4:A4:10:D1:6E:7F:39:A1:A0:2A:32:A2:05:10
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6rsoGN1q1KQQ0W5_OaGgKjKiBRA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.184.0/22
Signature Algorithm: sha256WithRSAEncryption
89:f9:98:20:43:cd:a0:bc:86:b2:02:6d:ac:c7:19:33:08:bf:
3f:94:d2:4a:2e:2a:2d:ca:89:bb:0b:8b:12:82:8d:89:eb:90:
2f:75:89:10:23:50:42:00:25:b3:f1:44:8a:22:86:91:63:a2:
c2:4a:86:7d:fd:26:40:71:2a:46:e4:d5:5b:bb:36:37:6c:4b:
36:6f:26:c0:8d:b1:c7:bc:19:62:b9:67:9a:31:02:db:96:69:
b0:b0:7b:0b:12:7c:d5:87:fd:d1:da:16:9d:03:be:e4:4f:36:
ac:a5:5e:b8:2c:fc:5e:b9:69:8c:85:d0:a1:9d:a5:1e:57:67:
2f:46:71:8a:3c:fb:c4:b7:fe:c2:a5:11:11:0b:1b:7d:c4:b5:
30:79:ee:ba:e4:3f:15:22:3f:d3:c6:ee:3f:fa:09:ba:9a:57:
53:80:00:e5:52:bc:88:79:26:25:98:2c:3f:68:43:94:b0:8e:
de:32:0c:1e:f8:dd:89:1c:6f:83:0c:de:5e:59:aa:c6:b0:e7:
b5:31:44:23:a7:9f:fb:48:76:d2:89:0c:06:cb:87:fc:2f:cc:
4d:da:08:37:44:25:01:36:70:0f:0b:e1:d5:6e:5f:2b:1a:3e:
d4:ad:ea:ed:4d:5d:ca:96:ec:91:24:0b:fa:51:10:be:38:90:
93:31:2e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:21 2023 by rpki-client on console-ams.rpki-client.org